Solved by bruteforcing file magic, fuzzing finfo and injecting payload in file metadata to get sql injection in sqlite3 and then RCE.